From dc6ac495aff03d13f0b830de6cdc29d509534206 Mon Sep 17 00:00:00 2001
From: James Moger <james.moger@gitblit.com>
Date: Fri, 29 Mar 2013 16:39:16 -0400
Subject: [PATCH] Disable SNI extensions for client SSL connections
---
src/main/java/com/gitblit/utils/ConnectionUtils.java | 4 ++++
1 files changed, 4 insertions(+), 0 deletions(-)
diff --git a/src/main/java/com/gitblit/utils/ConnectionUtils.java b/src/main/java/com/gitblit/utils/ConnectionUtils.java
index f0b4111..feeedd2 100644
--- a/src/main/java/com/gitblit/utils/ConnectionUtils.java
+++ b/src/main/java/com/gitblit/utils/ConnectionUtils.java
@@ -61,6 +61,10 @@
SSL_CONTEXT = context;
HOSTNAME_VERIFIER = new DummyHostnameVerifier();
CHARSET = "UTF-8";
+
+ // Disable Java 7 SNI checks
+ // http://stackoverflow.com/questions/7615645/ssl-handshake-alert-unrecognized-name-error-since-upgrade-to-java-1-7-0
+ System.setProperty("jsse.enableSNIExtension", "false");
}
public static void setAuthorization(URLConnection conn, String username, char[] password) {
--
Gitblit v1.9.1